Your smart plug shouldn't be able to see your laptop. Here's how I split my home Wi-Fi into four isolated networks in about two hours, with the configs, the firewall rules, and a test to prove it works.
RFC 10008 just standardized HTTP QUERY safe, idempotent, and body-carrying. A SOC lead's breakdown of where WAF rules, cache keys, and CSRF middleware haven't caught up yet